Fine-grained Image Classification on Oxford-IIIT Pets
97.3AccuracyCAP
Evaluation Results
| Method | Links | |||
|---|---|---|---|---|
| CAPTraining data setup=primary2021.01 | 97.3 | — | — | |
| GPipeTraining data setup=primary2021.01 | 95.9 | — | — | |
| C-TPTPre-trained Backbone=CLIP-ViT-L/14, Perturbation budget (epsilon)=4.02025.04 | 94.3 | — | 0 | |
| OPAMTraining data setup=primary + secondary2021.01 | 93.8 | — | — | |
| TPTPre-trained Backbone=CLIP-ViT-L/14, Perturbation budget (epsilon)=4.02025.04 | 93.8 | — | 0 | |
| MTAPre-trained Backbone=CLIP-ViT-L/14, Perturbation budget (epsilon)=4.02025.04 | 93.7 | — | 64.9 | |
| R-TPTPre-trained Backbone=CLIP-ViT-L/14, Perturbation budget (epsilon)=4.02025.04 | 93.7 | — | 72.9 | |
| InterActTraining data setup=primary2021.01 | 93.5 | — | — | |
| EnsemblePre-trained Backbone=CLIP-ViT-L/14, Perturbation budget (epsilon)=4.02025.04 | 93.4 | — | 63.5 | |
| CLIPPre-trained Backbone=CLIP-ViT-L/14, Perturbation budget (epsilon)=4.02025.04 | 93.1 | — | 0 | |
| TL-AttnTraining data setup=primary + secondary2021.01 | 92.5 | — | — | |
| NACTraining data setup=primary2021.01 | 91.6 | — | — | |
| Clean (Reference)Backbone=CLIP-ViT-B/16, Labeling Strategy=none (clean accuracy)2026.06 | 90.3 | — | — | |
| CLIPBackbone=CLIP-ViT-B/16, Epsilon (ε)=4.02025.04 | 88.3 | 0 | — | |
| CLIPBackbone=ViT-B/16, Epsilon (ε)=4/2552026.05 | 88.3 | — | 0 | |
| TTPBackbone=ViT-B/16, Epsilon (ε)=4/2552026.05 | 88.3 | — | 64.7 | |
| C-TPTBackbone=CLIP-ViT-B/16, Epsilon (ε)=4.02025.04 | 88.2 | 0 | — | |
| MTABackbone=CLIP-ViT-B/16, Epsilon (ε)=4.02025.04 | 88 | 51.8 | — | |
| MTABackbone=ViT-B/16, Epsilon (ε)=4/2552026.05 | 88 | — | 51.8 | |
| TPTBackbone=CLIP-ViT-B/16, Epsilon (ε)=4.02025.04 | 87.4 | 0 | — | |
| R-TPTBackbone=CLIP-ViT-B/16, Epsilon (ε)=4.02025.04 | 87.2 | 60.2 | — | |
| R-TPTBackbone=ViT-B/16, Epsilon (ε)=4/2552026.05 | 87.2 | — | 60.2 | |
| AGCBackbone=ViT-B/16, Epsilon (ε)=4/2552026.05 | 87 | — | 96.1 | |
| MTABackbone=ViT-B/32, Epsilon (ε)=4/2552026.05 | 86.3 | — | 53.6 | |
| MTABackbone=CLIP-ViT-B/32, Epsilon (ϵ)=4/255, Defense Category=Test-time Defense2026.06 | 86.3 | — | 53.6 | |
| EnsembleBackbone=CLIP-ViT-B/16, Epsilon (ε)=4.02025.04 | 86.2 | 51.2 | — | |
| T-VSSBackbone=CLIP-ViT-B/32, Epsilon (ϵ)=4/255, Defense Category=Test-time Defense2026.06 | 85.3 | — | 63.2 | |
| CLIPPre-trained Backbone=ViT-B/32, Perturbation budget (epsilon)=4.02025.04 | 85.1 | — | 0 | |
| CLIPBackbone=ViT-B/32, Epsilon (ε)=4/2552026.05 | 85.1 | — | 0 | |
| CLIPBackbone=CLIP-ViT-B/32, Epsilon (ϵ)=4/255, Defense Category=Baseline2026.06 | 85.1 | — | 0 | |
| EnsembleBackbone=ViT-B/16, Epsilon (ε)=4/2552026.05 | 85 | — | 65.9 | |
| TTPBackbone=ViT-B/32, Epsilon (ε)=4/2552026.05 | 84.7 | — | 61 | |
| TTPBackbone=CLIP-ViT-B/32, Epsilon (ϵ)=4/255, Defense Category=Test-time Defense2026.06 | 84.7 | — | 61 | |
| R-TPTPre-trained Backbone=ResNet50, Perturbation budget (epsilon)=1.02025.04 | 84.6 | — | 74.2 | |
| R-TPTPre-trained Backbone=ViT-B/32, Perturbation budget (epsilon)=4.02025.04 | 84.5 | — | 55.8 | |
| R-TPTBackbone=ViT-B/32, Epsilon (ε)=4/2552026.05 | 84.5 | — | 55.8 | |
| R-TPTBackbone=CLIP-ViT-B/32, Epsilon (ϵ)=4/255, Defense Category=Test-time Defense2026.06 | 84.5 | — | 55.8 | |
| AGCBackbone=ViT-B/32, Epsilon (ε)=4/2552026.05 | 84.1 | — | 94 | |
| CLIPPre-trained Backbone=ResNet50, Perturbation budget (epsilon)=1.02025.04 | 83.6 | — | 0 | |
| TTCBackbone=ViT-B/32, Epsilon (ε)=4/2552026.05 | 83.5 | — | 11.8 | |
| TTCBackbone=CLIP-ViT-B/32, Epsilon (ϵ)=4/255, Defense Category=Test-time Defense2026.06 | 83.5 | — | 11.8 | |
| EnsembleBackbone=ViT-B/32, Epsilon (ε)=4/2552026.05 | 82.3 | — | 66.2 | |
| TTCBackbone=ViT-B/16, Epsilon (ε)=4/2552026.05 | 82.3 | — | 10.4 | |
| APT+TeCoAPre-trained Backbone=ResNet50, Perturbation budget (epsilon)=1.02025.04 | 79.3 | — | 79 | |
| FAREPre-trained Backbone=ViT-B/32, Perturbation budget (epsilon)=4.02025.04 | 76.7 | — | 73.8 | |
| FAREBackbone=CLIP-ViT-B/32, Epsilon (ϵ)=4/255, Defense Category=Training-time Defense2026.06 | 76.7 | — | 73.8 | |
| TeCoAPre-trained Backbone=ResNet50, Perturbation budget (epsilon)=1.02025.04 | 76 | — | 75.8 | |
| EnsembleBackbone=CLIP-ViT-B/32, Epsilon (ϵ)=4/255, Defense Category=Test-time Defense2026.06 | 75 | — | 52.5 | |
| TeCoAPre-trained Backbone=ViT-B/32, Perturbation budget (epsilon)=4.02025.04 | 66.9 | — | 63.7 | |
| TeCoABackbone=CLIP-ViT-B/32, Epsilon (ϵ)=4/255, Defense Category=Training-time Defense2026.06 | 66.9 | — | 63.7 | |
| APT+TeCoAPre-trained Backbone=ViT-B/32, Perturbation budget (epsilon)=4.02025.04 | 66.7 | — | 63.9 | |
| APT+TeCoABackbone=CLIP-ViT-B/32, Epsilon (ϵ)=4/255, Defense Category=Training-time Defense2026.06 | 66.7 | — | 63.9 | |
| APTPre-trained Backbone=ResNet50, Perturbation budget (epsilon)=1.02025.04 | 31.9 | — | 3.8 | |
| APTPre-trained Backbone=ViT-B/32, Perturbation budget (epsilon)=4.02025.04 | 10 | — | 0.2 | |
| APTBackbone=CLIP-ViT-B/32, Epsilon (ϵ)=4/255, Defense Category=Training-time Defense2026.06 | 10 | — | 0.2 | |
| CLIPBackbone=CLIP-ViT-B/16, Attack Type=PGD-100, Perturbation Budget (epsilon)=4/255, Labeling Strategy=pseudo-labels2026.06 | — | — | 3.1 | |
| DBDBackbone=CLIP-ViT-B/16, Attack Type=PGD-100, Perturbation Budget (epsilon)=4/255, Labeling Strategy=pseudo-labels2026.06 | — | — | 88.6 | |
| R-TPTBackbone=CLIP-ViT-B/16, Attack Type=PGD-100, Perturbation Budget (epsilon)=4/255, Labeling Strategy=pseudo-labels2026.06 | — | — | 66.1 |